- Bird-users - Mailing Lists

integration with Fastnetmon
by Neil Morris 01 Feb '16

01 Feb '16

Morning folks, I have just started looking into BIRD for use with Fastnetmon for DDoS mitigation. I see that ExaBGP is aready integrated with Fastnetmon, but was interested to hear from anyone who has used BIRD. thanks in advance Kind Regards, Neil

3 2

bgp path metric
by Rohrmann Sascha 29 Jan '16

29 Jan '16

Hi, I have 2 routers which perform an iBGP peer. Now, every route, which they exchange should get a special metric (e.g: received route from same ASN, route metric= route metric + 100). How am I be able to influence that? I've already tried to check from which AS a route came and preprent (I am not sure if this is the correct keyword btw) it. Here's my filter settings so far: export filter { if bgp_path ~ [= ASN =] then { bgp.path.prepend (ASN,100); accept; } }; I'd be thankful for every help.

1 0

BIRD and ECMP on Linux seems flaky
by Arno Töll 27 Jan '16

27 Jan '16

Hi list, I've been experimenting with bird's ECMP features added to the current git head a while back [1] on my Debian based Linux system. I tried the setup below with git head as of today. I have three Linux routers running with bird. Two I called gw (gateway) one being a frontend. The gateways are configured to establish one BGP session to the frontend each, and advertising fd57::1 and fd57::2 to it. The frontend accepts both advertisement, and exports both to the kernel table. All output below comes from this bird. I configured bird like this: log syslog { debug, trace, info, remote, warning, error, auth, fatal, bug }; router id 10.3.101.3; # Filters filter kernel_export { if net ~ [ fd57::/64{128,128} ] then accept; reject; } # BGP Filters filter bgp_import { if net ~ [ fd57::/64{128,128} ] then accept; reject; } filter bgp_export { reject; } # Local devices protocol device { scan time 10; } protocol direct { interface "*"; } protocol kernel { import none; #learn; merge paths on; export filter kernel_export; } # BGP peers protocol bgp 'gw1' { description "gw1"; default bgp_local_pref 100; local fc57::3 as 65001; neighbor fc57::1 as 65000; next hop self; import filter bgp_import; export filter bgp_export; hold time 30; error wait time 5, 30; } protocol bgp 'gw2' { description "gw2"; default bgp_local_pref 100; local fc57::3 as 65001; neighbor fc57::2 as 65000; next hop self; import filter bgp_import; export filter bgp_export; hold time 30; error wait time 5, 30; } On the system I have this address configuration: root@debian:~# ip addr show eth0 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 64000 qdisc pfifo_fast state UP group default qlen 1000 link/ether 02:01:93:0b:5a:e9 brd ff:ff:ff:ff:ff:ff inet 10.10.216.12/24 brd 10.10.216.255 scope global eth0 valid_lft forever preferred_lft forever inet6 fc57::3/64 scope global valid_lft forever preferred_lft forever inet6 fe80::1:93ff:fe0b:5ae9/64 scope link valid_lft forever preferred_lft forever in bird: root@debian:~# birdc6 BIRD 1.5.0 ready. bird> show protocols name proto table state since info device1 Device master up 14:53:54 direct1 Direct master up 14:53:54 kernel1 Kernel master up 14:53:54 static1 Static master up 14:53:54 gw1 BGP master up 14:53:58 Established gw2 BGP master up 14:53:55 Established bird> show route fd57::2/128 via fc57::1 on eth0 [gw1 14:53:58] ! (100) [AS65000i] via fc57::2 on eth0 [gw2 14:53:55] (100) [AS65000i] fd57::1/128 via fc57::1 on eth0 [gw1 14:53:58] ! (100) [AS65000i] via fc57::2 on eth0 [gw2 14:53:55] (100) [AS65000i] fc57::/64 dev eth0 [direct1 14:53:54] * (240) Result being, that the multipath routes are being installed into the kernel routing table as expected once the sessions are up: root@debian:~# ip -6 route show fc57::/64 dev eth0 proto kernel metric 256 fd57::1 via fc57::1 dev eth0 proto bird metric 1024 fd57::1 via fc57::2 dev eth0 proto bird metric 1024 fd57::2 via fc57::1 dev eth0 proto bird metric 1024 fd57::2 via fc57::2 dev eth0 proto bird metric 1024 fe80::/64 dev eth0 proto kernel metric 256 However, after some time, bird seems to confuse itself by the routes it installed and removes the multipath route again. This can be seen again in ip route show: root@debian:~# ip -6 route show fc57::/64 dev eth0 proto kernel metric 256 fd57::1 via fc57::2 dev eth0 proto bird metric 1024 fd57::2 via fc57::2 dev eth0 proto bird metric 1024 fe80::/64 dev eth0 proto kernel metric 256 In bird they are however still received: root@ps:~# birdc6 show route all BIRD 1.5.0 ready. fd57::2/128 via fc57::1 on eth0 [gw1 16:25:25] ! (100) [AS65000i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 65000 BGP.next_hop: fc57::1 fe80::1:bdff:feab:7f12 BGP.local_pref: 100 via fc57::2 on eth0 [gw2 16:25:23] (100) [AS65000i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 65000 BGP.next_hop: fc57::2 fe80::1:bdff:fe05:64b7 BGP.local_pref: 100 fd57::1/128 via fc57::1 on eth0 [gw1 16:25:25] ! (100) [AS65000i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 65000 BGP.next_hop: fc57::1 fe80::1:bdff:feab:7f12 BGP.local_pref: 100 via fc57::2 on eth0 [gw2 16:25:23] (100) [AS65000i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 65000 BGP.next_hop: fc57::2 fe80::1:bdff:fe05:64b7 BGP.local_pref: 100 ... In the bird log, with debug output enabled I can see: Jan 11 15:12:46 ps bird6: gw1: Got KEEPALIVE Jan 11 15:12:49 ps bird6: gw2: Got KEEPALIVE Jan 11 15:12:50 ps bird6: gw1: Sending KEEPALIVE Jan 11 15:12:52 ps bird6: gw2: Sending KEEPALIVE Jan 11 15:12:54 ps bird6: device1: Scanning interfaces Jan 11 15:12:54 ps bird6: kernel1: Scanning routing table Jan 11 15:12:54 ps bird6: kernel1: fd57::1/128: will be updated Jan 11 15:12:54 ps bird6: kernel1: fd57::1/128: already seen Jan 11 15:12:54 ps bird6: kernel1: fd57::2/128: will be updated Jan 11 15:12:54 ps bird6: kernel1: fd57::2/128: already seen Jan 11 15:12:54 ps bird6: kernel1: Pruning table master Jan 11 15:12:54 ps bird6: kernel1: fd57::2/128: updating Jan 11 15:12:54 ps bird6: Netlink: File exists Jan 11 15:12:54 ps bird6: kernel1: fd57::1/128: updating Jan 11 15:12:54 ps bird6: Netlink: File exists After a while, the problem fixes itself, both routes are being installed, and then the problem reappears for the next cycle. Is there a way around this, or is this actually a bug? To me this looks like bird was scanning it's own routes and falsely scans only one of them. Experimenting with "import all", "learn" etc. for the kernel protocol seems to make no difference. [1] https://gitlab.labs.nic.cz/labs/bird/commit/8d9eef17713a9b38cd42bd59c4ce76c… -- Arno Töll GnuPG Key-ID: 0x9D80F36D

4 5

code change to prevent crash in rt-attr.c
by Steve Atkinson 27 Jan '16

27 Jan '16

Hi, We have a port of bird for a powerpc based Znyx (http://www.znyx.com) ZX6000 ATCA Layer 3 Switch. We have discovered that the current mainline cores while processing rt-attr.c function rta_lookup(), we have traced this back to a uninitialized stack variable in linux/netlink.c function nl_parse_route(). The addition of memset(&ra, 0, sizeof(ra)); Just after the creation of ra, was enough to prevent the crash. Steve PS Apologize for not attaching a patch, but our code tree has many unwanted changes port to ZX6000 which is stuck on gcc-2.95.3 and glibc-2.1.3 ======================= Steve Atkinson CEng BEng(hon) MIET Teligent Ltd 2 Kings Hill Avenue West Malling Kent ME19 4AQ Telephone: +44(0) 1732 879 655 Fax: +44 (0) 1732 879601 [YourHomePhoneIsAnywhere] The information in this email is confidential. The contents may not be disclosed or used by anyone other than the addressee. If you are not the intended recipient, please notify the sender immediately at the above address. The sender cannot accept any responsibility for the accuracy or completeness of this message as it has been transmitted over a public network. [BSI] Teligent Ltd is registered in England and Wales, registration number 2893478. Registered office Lion House, Red Lion Street, London WC1R 4GB. VAT registration GB639938577.

1 0

Re: [PATCH v2 2/2] Add the Babel protocol.
by Toke Høiland-Jørgensen 18 Jan '16

18 Jan '16

Juliusz Chroboczek <jch(a)pps.univ-paris-diderot.fr> writes: >> I did not read mentioned thread, but note that here the function >> babel_find_source() iterates only through sources for one propagated >> prefix. > > Ah, I missed that. So yeah, no problem. Ah, right. Was wondering why that would be a problem... Yeah, there's a FIB for the prefix lookup :) Hmm, benchmarking would be interesting; maybe I'll try to get a node attached to that Slovenian network and see what breaks :) >> I have one more general question. Is ETX cost algorithm really >> a reasonable idea? [...] It seems to me that in many cases it will lead >> to oscillations, because packet loss in wireless networks usually >> depends on traffic load. It seems to me that dynamic cost algorithms >> based on packet loss should at least use some hysteresis. > > You're right, we're doing hysteresis in babeld. Yeah, that ended up on my "nice to have" list, so didn't implement it in the first round. Related to that: Ondrej, I believe I saw you mention in another thread that the planned 2.0 release will be coming out soonish. Does that mean there will be dual-stack capabilities? That, and source-specific routing, are the two main things missing from Bird to get this Babel implementation to feature parity with babeld... I'll be happy to look into that at some point in the future (after you're finished going over this version with that fine-toothed comb of yours) :) > I'll be deploying one or two nodes with Toke's code as soon as I redo > our bench network (migrating from AHCP to HNCP), we'll see whether it > introduces any pathologies. Yay! Will look forward to the torrent of bug reports ;) -Toke

1 0

Re: [PATCH v2 2/2] Add the Babel protocol.
by Ondrej Zajicek 17 Jan '16

17 Jan '16

On Mon, Jan 18, 2016 at 12:03:46AM +0100, Juliusz Chroboczek wrote: > > I have one more general question. Is ETX cost algorithm really > > a reasonable idea? [...] It seems to me that in many cases it will lead > > to oscillations, because packet loss in wireless networks usually > > depends on traffic load. It seems to me that dynamic cost algorithms > > based on packet loss should at least use some hysteresis. > > You're right, we're doing hysteresis in babeld. This is described in > Section III.E of > > http://arxiv.org/pdf/1403.3488.pdf Thanks, i will check that. -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

1 0

Re: [PATCH v2 2/2] Add the Babel protocol.
by Ondrej Zajicek 17 Jan '16

17 Jan '16

On Mon, Jan 18, 2016 at 12:15:31AM +0100, Juliusz Chroboczek wrote: > > Where BABEL_MIN_MTU is 540 (512 adjusted for IP and UDP headers). > > Should this be 560? The control traffic is carried over IPv6. You are right, 540 is for IPv4. -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

1 0

Birdc OSPF propagate connected networks from VLANs
by viker 12 Jan '16

12 Jan '16

Hello everybody, i have a strange problem with propagation of subnets to OSPF area. scheme: --------------- Area 0 ----------------- -- Router1 -- ------------------ -- Router 2 -- --------------- ----------------- | LAGG iface | LAGG iface On both routers are bonded ifaces in LAGG. When i create vlan on LAGG trunk (i'm on FreeBSD 10.2. bird 1.5.0), i have in route export only ip/32 on vlan iface, not whole subnet. Configuration of bird: #### Main #### log "/var/log/bird.log" all; router id XXX.XXX.XXX.XXX; debug protocols all; protocol static { route YYY.YYY.YYY.YYY/NN via "vlanXX"; export all; import all; } protocol device { scan time 120; export all; } protocol kernel { learn; persist; scan time 30; import all; export all; } protocol ospf { import filter { accept; }; export all; area 0.0.0.0 { interface "ix0" { cost 10; type broadcast; hello 10; retransmit 5; wait 15; dead 30; }; networks { 10.0.0.0/8; 172.16.0.0/12; 192.168.0.0/16; }; }; }; Interesting thing is , when i import subnet to main table via :route XXX.XXX.XXX.XXX via "vlanXXX"; in static protocol and do birdc configure, propagation is working. So it seems to me that protocol device (or kernel) is not correctly importing created subnet into main table. Any ideas ? Thank You All Viker -- S pozdravem Vilem Kebrt email: viker(a)viker.cz tel: +420 604 550 132

3 5

Turris Omnia - campaign ends soon
by Ondrej Filip 11 Jan '16

11 Jan '16

Hi BIRD users! I hope you will forgive me one e-mail regarding our other project. As you might know, our company (CZ.NIC) is currently developing not just BIRD, but we are also working on an open source (SW and HW) SOHO router called Turris Omnia. To support our development we launched an IndieGoGo campaign. The campaign will end on Monday, so if you want to buy a great open source router that works very well with BIRD, please check this URL - https://www.indiegogo.com/projects/turris-omnia-hi-performance-open-source-… Kind regards and good luck in 2016! Ondrej

8 14

Re: Turris Omnia - campaign ends soon
by Ondrej Filip 08 Jan '16

08 Jan '16

On 8.1.2016 19:25, Michal Humpula wrote: > Hi Ondřej, > > is there an estimate of routing capacity, i.e. octets and packets per second > it will be able to route between the SFP and gigabit ports? Hi Michal! Sure it is 450 000 packets per second Ondrej > > Cheers > Michal > > On Friday 08 of January 2016 17:52:31 Ondrej Filip wrote: >> Hi BIRD users! >> I hope you will forgive me one e-mail regarding our other project. As >> you might know, our company (CZ.NIC) is currently developing not just >> BIRD, but we are also working on an open source (SW and HW) SOHO >> router called Turris Omnia. To support our development we launched an >> IndieGoGo campaign. The campaign will end on Monday, so if you want to >> buy a great open source router that works very well with BIRD, please >> check this URL - >> https://www.indiegogo.com/projects/turris-omnia-hi-performance-open-source-r >> outer/x/12683243#/ >> >> Kind regards and good luck in 2016! >> >> Ondrej >

2 1